DigitalOcean Privacy Policy changes — 20200803_rev01

119

This Privacy Policy may be modified from time to time, so please review it frequently. Changes to this Privacy Policy will be posted on our websites. If we materially change the ways in which we use or share personal information previously collected from you through our Services, we will notify you through our Services, by email, or other communication.

120

121

## 13\. International Data Transfers

122

123

DigitalOcean is a global business. We may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.

124

125

**EU-U.S. and Swiss-U.S. Privacy Shield.** For personal data we receive from the EEA and Switzerland, DigitalOcean has certified its compliance to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from such countries. For more information on our Privacy Shield certification, please see our [Privacy Shield Notice](https://www.digitalocean.com/legal/privacy-shield/).

125

**EU-U.S. and Swiss-U.S. Privacy Shield.** For personal data we receive from the EEA and Switzerland, DigitalOcean has certified its compliance to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from such countries. To access the Privacy Shield List and to find details of our certification, please visit: [https://www.privacyshield.gov/](https://www.privacyshield.gov/).

126

127

To access the Privacy Shield List and to find details of our certification, please visit: [https://www.privacyshield.gov/](https://www.privacyshield.gov/).

127

DigitalOcean currently utilizes [Standard Contractual Clauses](https://www-static.cdn.prismic.io/www-static/4578633e-ba6b-4c45-845c-1e69848c6e3b_DigitalOcean+SCC+Template.pdf) in connection with transfers of data from the EEA to the US insofar as the EU-US Privacy Shield is deemed invalidated and other means are not yet in place. Please also refer to our [GDPR FAQ](https://www.digitalocean.com/legal/gdpr-faq/) and [Data Processing Agreement](https://www.digitalocean.com/legal/data-processing-agreement/) for more information about data transfers.

128

129

## Contact Us

130

131

If you have any questions or concerns about this Privacy Policy, please feel free to email us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com).

132

133

The data controller of your personal information is DigitalOcean, LLC.

+Last updated: December 31, 2019
+Last updated: July 31, 2020
 This Privacy Policy describes how DigitalOcean, LLC and its affiliates ("DigitalOcean," "we," "our" or "us") collect, use, and share information in connection with your use of our websites (including www.digitalocean.com), services, and applications (collectively, the "Services"). This Privacy Policy (the "Privacy Policy") does not apply to information our customers may process when using our Services.
 If you are looking for CCPA-specific information, check out our [CCPA Privacy Notice](https://www.digitalocean.com/legal/ccpa-privacy-notice/) as well, which is incorporated into this Privacy Policy.
 We may collect and receive information about users of our Services ("users," "you," or "your") from various sources, including: (i) information you provide through your user account on the Services (your "Account") if you register for the Services; (ii) your use of the Services; and (iii) from third-party websites, services, and partners.
 If you are a resident of the EEA, you have the following data protection rights:
 - If you wish to **access, correct, update, or request deletion** of your personal information, you can do so at any time by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
 - In addition, you can **object to the processing** of your personal information, ask us to **restrict the processing** of your personal information, or **request portability** of your personal information. Again, you can exercise these rights by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
 - You have the right to **opt-out of marketing communications** we send you at any time. You can exercise this right by clicking on the "unsubscribe" or "opt-out" link in the marketing emails we send you. To opt-out of other forms of marketing, please contact us by emailing [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
+- Similarly, if we have collected and process your personal information with your consent, then you can**withdraw your consent** at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
+- Similarly, if we have collected and process your personal information with your consent, then you can **withdraw your consent** at any time. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to your withdrawal, nor will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.
 - You have the **right to complain to a data protection authority** about our collection and use of your personal information. For more information, please contact your local data protection authority.
 We respond to all requests we receive from individuals wishing to exercise their data protection rights in accordance with applicable data protection laws.
 ## 10\. Your Choices
 This Privacy Policy may be modified from time to time, so please review it frequently. Changes to this Privacy Policy will be posted on our websites. If we materially change the ways in which we use or share personal information previously collected from you through our Services, we will notify you through our Services, by email, or other communication.
 ## 13\. International Data Transfers
 DigitalOcean is a global business. We may transfer personal information to countries other than the country in which the data was originally collected. These countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your personal information to other countries, we will protect that information as described in this Privacy Policy.
+**EU-U.S. and Swiss-U.S. Privacy Shield.** For personal data we receive from the EEA and Switzerland, DigitalOcean has certified its compliance to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from such countries. For more information on our Privacy Shield certification, please see our [Privacy Shield Notice](https://www.digitalocean.com/legal/privacy-shield/).
+**EU-U.S. and Swiss-U.S. Privacy Shield.** For personal data we receive from the EEA and Switzerland, DigitalOcean has certified its compliance to the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework as set forth by the U.S. Department of Commerce regarding the collection, use, and retention of personal data from such countries. To access the Privacy Shield List and to find details of our certification, please visit: [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
+To access the Privacy Shield List and to find details of our certification, please visit: [https://www.privacyshield.gov/](https://www.privacyshield.gov/).
+DigitalOcean currently utilizes [Standard Contractual Clauses](https://www-static.cdn.prismic.io/www-static/4578633e-ba6b-4c45-845c-1e69848c6e3b_DigitalOcean+SCC+Template.pdf) in connection with transfers of data from the EEA to the US insofar as the EU-US Privacy Shield is deemed invalidated and other means are not yet in place. Please also refer to our [GDPR FAQ](https://www.digitalocean.com/legal/gdpr-faq/) and [Data Processing Agreement](https://www.digitalocean.com/legal/data-processing-agreement/) for more information about data transfers.
 ## Contact Us
 If you have any questions or concerns about this Privacy Policy, please feel free to email us at [privacy@digitalocean.com](mailto:privacy@digitalocean.com).
 The data controller of your personal information is DigitalOcean, LLC.

Privacy Policy

Full text changes — 20200605_rev01 to 20200803_rev01